ICEN PAXTON 

ATTORNHY GENERAL OF TEXAS 


June 28, 2017 


Ms. Lis^uiz 
ParalegaT^.^^^ 

Office of the CTysAltorney 
City of Dal] as 

1500 Manila Street, RoolnfKTON 
Dallas, Texas 75201 


OR2017-14415 


Dear Ms. Ruiz: 

You ask whether certain information is subject to required public disclosure under the 
Public Information Act (the “Act”), chapter 552 of the Government Code. Your request was 
assigned ID# 663465 (ORR# C002695), 

The City of Dallas (the “city”) received a request for information related to eveiy recorded 
hack or electronic breach of a city computer during a specified time period. The city claims 
the submitted information is excepted from disclosure under sections 552,101 and 552.139 
of the Government Code. We have considered the exceptions the city claims and reviewed 
the submitted representative sample of information.' 

Section 552.139 of the Government Code provides, in relevant part: 

(a) Information is excepted from [required public disclosure] if it is 
information that relates to computer network security, to restricted 
information under Section 2059.055 [of the Government Code], or to the 
design, operation, or defense of a computer network. 

(b) The following information is confidential: 


We assume the “representative sample” of records submitted to this office is truly representative of 
the requested records as a whole. See Open Records Decision Nos. 499 (1988), 497 (1988). This open records 
letter does not reach, and therefore does not authorize the withholding of, any other requested records to the 
extent those records contain substantially different types of information than that submitted to this office. 
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(1) a computer network vulnerability report; 


(2) any other assessment of the extent to which data processing 
operations, a computer, a computer program, network, system, or 
system interface, or software of a governmental body or of a 
contractor of a governmental body is vulnerable to unauthorized 
access or harm, including an assessment of the extent to which the 
governmental body’s or contractor’s electronically stored information 
containing sensitive or critical information is vulnerable to alteration, 
damage, erasure, or inappropriate use[.] 

Gov’t Code § 552.139(a), (b)(l)-(2). Section 2059.055 of the Government Code provides, 
in pertinent part: 

(b) Network security information is confidential under this section if the 
information is: 

(1) related to passwords, personal identification numbers, access 
codes, encryption, or other components of the security system of a 
state agency; 

(2) collected, assembled, or maintained by or for a governmental 
entity to prevent, detect, or investigate criminal activity; or 

(3) related to an assessment, made by or for a governmental entity or 
maintained by a governmental entity, of the vulnerabi lity of a network 
to criminal activity. 

Id. § 2059.055(b). The city states the submitted-information provides details about cyber 
security breaches, the release of which will provide adversaries, cyber attackers, and cyber 
activists with the city’s cyber defensive strategies, products, operations, tactics, network 
security configurations, incident responses, and counter cyber security tactics that are used 
to protect the city’s information systems and assets. The city argues the information could 
be used to devise counter attack strategies-that could adversely affectthe city’s information 
security and interfere with the city’s abiliiy to effectively deliver services. Based on these 
argument:S and-our review. of4:he information, we find the submitted information relates to 
computer network security, and the design, operation, or defense of the city’s computer 
network. Accordingly, the city must withhold the submitted information under 
section 552.139 of the Government Code.^ 


^As our ruling is dispositive, we need not address the remaining argument against disclosure of the 
submitted information. 
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This letter ruling is limited to the particular information at issue in this request and limited 
to the facts as presented to us; therefore, this ruling must not be relied upon as a previous 
determination regarding any other information or any other circumstances. 

This ruling triggers important deadlines regarding the rights and responsibilities of the 
governmental body and of the requestor. For more information concerning those rights 
and responsibilities, please visit our website at ht(p://www.texasanorncvaencral.iiQv/open/ 
orl ruling , info.shtml , or call the Office of the Attorney General’s Open Government 
Hotline, toll free, at (877) 673-6839. Questions concerning the allowable charges for 
providing public information under the Act may be directed to the Office of the Attorney 
General, toll free, at (888) 672-6787. 

Sincerely, 

Claire V. Morris Sloan 
Assistant Attorney General 
Open Records Division 

CVMS/som 

Ref: ID# 663465 


c: Requestor 



KEN PAXTON 

ArrORNKY GENERAL OF TEXAS 


June 26,2017 


Ms, Lisa: 

Paralega 
City Dallas 
150( anila Street, Room 7DN 

Dai; Texas 75201 



OR2017-14186 


Dear Ms. Ruiz: 

You ask whether certain information is subject to required public disclosure under the 
Public Information Act (the “Act”), chapter 552 of the Government Code, Your request was 
assigned ID# 663653. 

The City of Dallas (the “city”) received two requests from different requestors for (1) ail city 
communications regarding a specified incident, and (2) investigation findings into the 
specified incident. The city states it will release some information. The city claims the 
submitted information is excepted from disclosure under sections 552.101,552.107,552.108, 
and 552.111 of the Government Code. We have considered the exceptions the city claims 
and reviewed the submitted representative sample of information.' 


Section 552.107(1) of the Government Code protects infonnation coming within the 
attorney-client privilege. When asserting the attorney-client privilege, a governmental body 
has the burden of providing the necessary facts to demonstrate the elements of the privilege 
in order to withhold the information at issue. Open Records Decision No. 676 at 6-7 (2002). 
First, a governmental body must demonstrate that the information constitutes or documents 
a communication. Id at 7. Second, the communication must have been made “to facilitate 


'We assume the “representative sample” of records submitted to this ofRce is truly representative of 
the requested records as a whole. See Open Records Decision Nos. 499 {1988), 497 (1988). This open records 
letter does not reach, and therefore does not authorize the withholding of, any other requested records to the 
extent those records contain substantially different types of information than that submitted to this office. 
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the rendition of professional legal services” to the client governmental body. Tex. R. 
Evid. 503(b)(1). The privilege does not apply when an attorney or representative is involved 
in some capacity other than that of providing or facilitating professional legal services to the 
client governmental body. In re Tex. Farmers Ins, Exck, 990 S.W.2d 337, 340 (Tex. 
App.—Texarkana 1999, orig. proceeding) (attorney-client privilege does not apply if attorney 
acting in a capacity other than that of attorney). Governmental attorneys often act in 
capacities other than that of professional legal counsel, such as administrators, investigators, 
or managers. Thus, the mere fact that a communication involves an attorney for the 
government does not demonstrate this element. Third, the privilege applies only to 
communications between or among clients, client representatives, lawyers, and lawyer 
representatives. Tex. R. Evid. 503(b)(1)(A), (B), (C), (D), (E). Thus, a governmental body 
must inform this office of the identities and capacities of the mdivlduals to whom each 
communication at issue has been made. Lastly, the attorney-client privilege applies only to 
a confidential communication, id. 503(b)(1), meaning it was “not intended to be disclosed 
to third persons other than those: (A) to whom disclosure is made to further the rendition of 
professional legal services to the client; or (B) reasonably necessary to transmit the 
communication.” Id. 503(a)(5). Whether a communication meets this definition depends 
on the intent of the parties involved at the time the information was communicated. Osborne 
V. Johnson, 954 S.W.2d 180,184 (Tex. App.—Waco 1997, orig. proceeding). Moreover, 
because the client may elect to waive the privilege at any time, a governmental body must 
explainthattheconfidentialityofacommunicationhasbeenmaintained. Section552.107(1) 
generally excepts an entire communication that is demonstrated to be protected by the 
attorney-client privilege unless otherwise waived by the governmental body. See Huie v. 
DeShazo, 922 S.W.2d 920, 923 (Tex. 1996) (privilege extends to entire communication, 
including facts contained therein). 


The city states the submitted information consists of conftdentiaL communications involving 
a city attorney and city employees in their capacities as clients. The city states these 
communications were made in furtherance of the rendition of professional legal services to 
the city. The city states the confidentiality of these communications has been maintained. 
Based on these representations and our review, we find the city has demonstrated the 
applicability of the attorney-client privilege to the information at issue. Thus, the city may 
withhold the submitted information under section 552.107(1) of the Government Code.^ 


This letter niling is limited to the particular information at issue in this request and limited 
to the facts as presented to us; therefore, this ruling must not be relied upon as a previous 
determination regarding any other information or any other circumstances'. 


As our ruling is dispositive, we need not address the city’s remaining arguments against disclosure. 
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This ruling triggers important deadlines regarding the rights and responsibilities of the 
govemmentaJ l»dy and of the requestor. For more information concerning those rights 
and responsibilities, please visit our website at http://www texasatlornevueneral.oov/npen/ 
oil ruling info.shtml, or call the Office of the Attorney General’s Open Government 
Hotline, toll free, at (877) 673-6839. Questions concerning the allowable charges for 
providing public information under the Act may be directed to the Office of the Attorney 
General, toll free, at (888)672-6787. 

Sincerely, 


Rabat Huq 

Assistant Attorney General 
Open Records Division 

RSH/tdw 

Ref: ID# 663653 


c: 


2 Requestors 



